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L CLAIM AMENDMENTS 

Please amend the claims as indicated in the following listing: 

1 . (currently amended) An apparatus comprising: 

A§ firewall Jhaying a processor and a memory, capabl e of cr e ating a plurality of trust 

te v e ls for a plurality of oomputer n e tworks 

wherein the fire wall is part of a router that creates a plurality of Vi rtual Local Area 

Networks using a network switch; 

wherein the network switch is connected to die firewall: 

wherein the memory contains a Virtual Local Area Network rules table: 

wherein the Virtual Local Area Network rules table allows an administrator to designate 

a trust level for each of the plurality of Virtual Local Area Networks: 

wherein only the firewall is used to protect each of the plurali ty of Virtual Local Area 

Networks i n accordance with a designated trust level , 

2 . (currently amended) The fir e wall of - okum- 1 coinprising -apparatus of claim 1 wherein the 
Virtual Local Area Network rules table further comprises: 

a plurality of ruloo; and 

a - tabl e defining the relationship between the trust levels, the rules, and the comput e r 
notworkfl p luralitv of Virtual Local Area Networks . 
3* (currently amended) The firewall- apparatus of claim 2> wherein the firewall further 

comprises: a configuration program, wherein the configuration program allows a user to add, 
delete, or modify the V irtual Local Area Network rules table and a plurality of t rust levels in 
the Virtual Local Area Network rules table. 
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4. (currently amended) The firewalia pparatus of claim 2, wherein the firewall further 
comprises: a security program, wherein the security program analyzes a packet and 
determines if the Virtual Local Area Network r ules table p ermit or d o n v permits or denies the 
packet 

5. (currently amended) The firewal l- apparatus of claim 4, wherein the security program 
comprises: 

instructions for determining &ea destination of the packet; 

instructions for determining 4hean appropriate ralesqile to use to analyze the packet 
using th e Virtual Local Area Network rules table table; 

instructions for analyzing the packet using the rale $apptopriate rule ; 

instructions for determining if the packet is permitted under the rak Kappropriate rule : 

responsive to a determination that the f u t o o p orm tt appropriate rule permits the packet, 
instructions for permitting the packet; and 

responsive to a determination that the rules deny the packet, instructions for denying 
the packet. 

6. (currently amended) The fir e wall apparatus o f claim 5, wherein the security program further 
comprises: responsive to a determination that the rules do not permit or deny the packet, 
instructions for denying the packet. 

7. canceled. 

8. (cun-ently amended) A router comprising; 

a switch connected to a firewall and a plurality of computer networks; and 
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wherein the firewall a] lows an administrator to e feates configure a plurality of trust 
levels and to a ooo c i ato n associate a trust level with each of the plurality of computer n e twork , 
networks; 

wherein the firewall serves each of the plurality of computer networks in accordance 
with the trust level associated with each of the plurality of computer networks . 

9. (original) The router of claim 8 wherein the switch comprises a sub-switch, the sub-switch 
being assigned one of a plurality of trust levels. 

10. (ori ginal) The router of claim 8 wherein the firewall analyzes a packet using some of the 
rules; and wherein the rules used in the lower trust levels are excluded from the rules used to 
analyze the packet. 

1 1 . (original) The router of claim 8, wherein the firewall further comprises: a configuration 
program, wherein the configuration program allows a user to add, delete, or modify the rules 
and trust levels in the table. 

12. (original) The router of claim 8, wherein the firewall further comprises: a security program, 
wherein the security program analyzes a packet and determines if the rules permit or deny the 
packet. 

13. (original) The router of claim 12, wherein the security program comprises: 

instructions for determining the sub-switch location of the packet; 
instructions for determining a source of the packet; 
instructions for determining a destination of the packet; and 
instructions for determining if the packet is attempting to go to a higher trust level; 
responsive to a determination that the packet is not attempting to go to a higher trust 
level, instructions for permitting the packet. 
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14, (original) The router of claim 13, wherein responsive to a determination that the packet is 
attempting to go to a higher trust level, the security program further comprises: 

instructions for determining the appropriate rules to use to analyze the packet using 
the table; 

instructions for analyzing the packet using the rules; 

instructions for determining if the packet is permitted under the rules; 

responsive to a determination that the rules permit the packet, instructions for 
permitting the packet; and 

responsive to a determination that the rules deny the packet, instructions for denying 
the packet. 

15, (original) The router of claim 14, wherein the security program further comprises: responsive 
to a determination that the rules do not permit or deny the packet, instructions for denying the 
packet. 

16. (original) The router of claim 8 wherein the firewall further comprises: a table defining the 
relationship between the trust levels, the rules, and the computer networks. 

17. (currently amended) A method for analyzing a packet using a firewall which creates a i 
plurality of trust l evels for a plurality of computer networks, the method comprising: 

using a single router containing the firewall to service_each of the plurality of 
computer network s bv performing the steps of: 
determining the destination of the packet; 
accessing a plurality of rules; 

determining the appropriate rules to use to analyze the packet; 
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analyzing the packet using the rules; 

determining if the packet is permitted under the rules; 

responsive to a determination that the rules permit the packet, permitting the packet; 

and 

responsive to a determination that the rul es deny the packet, denying the packet. 

1 8. (original) The method of claim 1 7 further comprising: responsive to a determination that the 
rules do not permit or deny the packet, denying the packet. 

1 9. (original) The method of cl aim 1 7 wherein a table defines the relationship between the trust 
levels, the rules, and the computer networks. 

20. (currently amended) A method for analyzing a packet using a firewall which creates a 
plurality of trust levels for a plurality of computer networks, the method comprising: 

using a single router containing the firewall to service, each of the plurality of 
computer networks bv performing the steps of: 

determining the sub-switch location of a packet; 
determining a source of the packet; 
determining a destination of the packet; 

determining if the packet is attempting to go to a higher trust level; and 
responsive to a determination that the packet is not attempting to go to a higher trust 
level, permitting the packet. 

21 . (original) The method of claim 20, wherein responsive to a determination that the packet is 
attempting to go to a higher trust level, the method further comprises: 

determining the appropriate rules to use to analyze the packet using the table; 
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analyzing the packet using the rules; 

determining if the packet is permitted under the rules; 

responsive to a determination that the rules permit the packet, permitting the packet; 

and 

responsive to a determination that the rules deny the packet, denying the packet. 

22. (original) The method of claim 21 wherein the security program further comprises: 
responsive to a determination that the rules do not permit or deny the packet, denying the 
packet. 

23. (original) The method of claim 20 wherein the firewall further comprises: a table defining the 
relationship between the trust levels, the rules, and the computer networks. 

24. (currently amended) A program product operable on a computer, the program product 
comprising: 

a computer-usable mediu m having instructions encoded thereon, for causing a 
computer to use t 

wh e r e in th e computer uoablo m e dium, comprises instructions comprising: a single 
router containing a firewall to service each of a plurality of computer networks by 
insti^etion fl^^determimng the destination of thea packet; 
instructions for accessing a plurality of rules; 

instruotiono for d etermining &e- an appropriate rptesnrfe to use to analyze the 

packet; 

inotruotions for analyzing the packet using the fate gappropriate rule : 



Page 7 of 12 



PAGE 9/14 * RCVO AT 4/2312007 3:24:23 PM [Eastern Daylight Time] * SVR:USPT0-EFXRM/4 * DNIS:2738300 1 CSID:2144614053 * DURATION (mm-ss):04-06 



04/23/2087 13:24 2144614053 



GORDON REES DFW 



PAGE 10/14 



Attorney Docket No. AUS920030685USI 
Serial No. 10/682,402 

Response to Office Action mailed January 23, 2007 

instructions for determ i ning if the packet is permitted under the Fa*ea_ 
appt\)priatc rule : 

responsive to a determination that the ariesa ppropriate rule penm * permits the 
packet, i n s tructions for permitting the packet; and 

responsive to a determination that the mis appropriate rule - dem Klenics t he 
packet, inotmotiona for denying the packet. 

25. (currently amended) The program product of claim 24 further comprising: responsive to a 
determination that the plurality of rules do not permit or deny the packet, instructions for 
denying the packet. 

26. (currently amended) The program product of claim 24 wherein a table defines the 
relationship between the trust levels, the rules, and the plurality of computer networks, 

27. (currently amended) A program product operable on a computer, the program product 
comprising: 

a computer-usable medium h aving a plurality of instructions encoded thereon : 

wherein the comput e r usable medium comprises instructions c e aaprighig: 

cause a single route r containing a firewall to secure each of a plurality of computer networks, 
and cause an administrator to assign a plurality of trust levels among the plurality of 
computer networks: 

instruot - kmp for determinin g to determine the sub-switch location of a packet; 
■ instructions for determinin g to determine a source of the packet; 
i nstructions for d e t e rmining to determine a destination of the packet; 
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-ms truotj oag - foF - d e t e rminin g to determine if the packet is attempting to go to a 
higher trust level; and 

responsive to a determination that the packet is not attempting to go to a 
higher trust level, instructions for permi ttin g to permit the packet. 

28. (original) The program product of claim 27, wherein responsive to a determination that the 
packet is attempting to go to a higher trust level, the method further comprises: 

instructions for determining the appropriate rules to use to analyze the packet using 
the table; 

instructions for analyzing the packet using the rules; 

instructions for determining if the packet is permitted under the rules; 

responsive to a determination that the roles permit the packet* instructions for 
permitting the packet; and 

responsive to a determination that the rules deny the packet, instructions for denying 
the packet. 

29. (original) The program product of claim 28 wherein the security program further comprises; 
responsive to a determination that the rules do not permit or deny the packet, instructions for 
denying the packet. 

30. (original) The program product of claim 27 wherein the firewall further comprises: a table 
defining the relationship between the trust levels, the rules, and the computer networks, 

31. (currently amended) A firewall capable of creating a plurality of trust levels for a plurality of 
computer networks comprising: 

a router containing the firewall; 
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a plurality of rules; 

a tabic defining the relationship between the trust levels, the rules, and the computer 
networks; 

a configuration program, wherein the configuration program allows a user to add, 
delete, or modify the rules and trust levels in the table; 

a security program, wherein the security program analyzes a packet and determines if 
the rules permit or deny the packet, the security program comprising: 

instructions for determining the destination of the packet; 

instructions for determining the appropriate rules to use to analyze the packet 
using the table; 

instructions for analyzing the packet using the rules; 

instructions for determining if the packet is permitted under the rules; 

responsive to a determination that the rules permit the packet, instructions for 
permitting the packet; 

responsive to a determination that the rules deny the packet, instructions for 
denying the packet; and 

responsive to a determination that the rules do not permit or deny the packet, 
instructions for denying the packet; 

wherein only the firewall is used to protect each of the plurality of computer 
networks , 
32. canceled. 
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